本文已被:浏览 1235次 下载 2507次
Received:April 22, 2014 Revised:May 22, 2014
Received:April 22, 2014 Revised:May 22, 2014
中文摘要: 随着SIP协议的广泛应用, SIP网络的安全机制也逐渐成为研究热点.针对SIP DoS洪泛攻击, 本文将相对熵引入SIP网络, 提出了一种基于相对熵的检测算法, 并与传统的信息熵检测算法进行比较.实验结果表明: 正常网络流量下信息熵值和相对熵值都基本稳定, 在发生DoS攻击时相对熵值波动明显, 比信息熵检测算法检测率更高, 检测结果更准确.
Abstract:With the extensive application of SIP protocol, the security mechanisms of SIP network have gradually become a hot topic. This article introduces relative entropy into SIP network, and proposes a detection algorithm based on it to against SIP DoS flooding attacks. We also compare this algorithm with the traditional entropy detection algorithm. The experimental results showed that: the entropy and relative entropy are both stable under normal network traffic. But relative entropy fluctuated significantly when attack occurred and our algorithm have a higher detection rate and more accurate results than entropy detection algorithm.
keywords: SIP DoS flooding attack entropy relative entropy
文章编号: 中图分类号: 文献标志码:
基金项目:
引用文本:
张晓月,胡访宇.基于相对熵的SIP DoS洪泛攻击检测算法和仿真.计算机系统应用,2015,24(1):135-138
ZHANG Xiao-Yue,HU Fang-Yu.Algorithm and Simulation of SIP DoS Flooding Attack Detection Based on Relative Entropy.COMPUTER SYSTEMS APPLICATIONS,2015,24(1):135-138
张晓月,胡访宇.基于相对熵的SIP DoS洪泛攻击检测算法和仿真.计算机系统应用,2015,24(1):135-138
ZHANG Xiao-Yue,HU Fang-Yu.Algorithm and Simulation of SIP DoS Flooding Attack Detection Based on Relative Entropy.COMPUTER SYSTEMS APPLICATIONS,2015,24(1):135-138